Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/dFXNGE4gvwzOgpubtV7DabFWYrI.roa
File: dFXNGE4gvwzOgpubtV7DabFWYrI.roa (raw, json)
Hash identifier: Qb66H5bRSuVggl8Aax3xDS9W0w50aCh/+B8+aJaD5bo=
Subject key identifier: 74:55:CD:18:4E:20:BF:0C:CE:82:9B:9B:B5:5E:C3:69:B1:56:62:B2
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0C85
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/dFXNGE4gvwzOgpubtV7DabFWYrI.roa
Signing time: Wed 04 Dec 2024 07:56:08 +0000
ROA not before: Wed 04 Dec 2024 07:56:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 4 07:56:08 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7455CD184E20BF0CCE829B9BB55EC369B15662B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:7b:84:03:86:ea:e2:35:97:b8:29:f5:c4:
2f:56:17:bd:ac:0a:d5:6f:51:81:cb:be:e7:87:71:
45:43:cd:ed:d9:eb:19:bd:9a:2d:e6:4f:75:34:d7:
70:dc:ad:0f:dc:d5:34:ea:d9:b4:7b:db:9c:ea:a6:
3b:dc:36:36:dc:6c:68:5f:74:d1:24:ea:1e:bd:c9:
11:fb:9e:15:77:ac:89:8d:0b:8b:59:8c:7f:ac:a0:
20:96:d4:d9:f4:d0:8a:ea:94:a0:8c:37:e9:31:fd:
3a:a4:11:ff:fa:34:40:8b:88:72:8f:d3:0e:af:87:
a7:92:a0:62:56:13:f8:5e:26:ca:22:15:62:bc:8d:
b0:78:bb:ed:39:a9:f7:46:91:11:5d:0e:24:d2:cb:
c9:b0:0f:08:d9:6b:f2:87:b5:da:1d:f5:87:bb:f8:
93:28:e6:c6:37:4d:e0:12:a3:f9:f1:27:69:5f:9c:
63:f9:92:cd:fc:f0:87:d4:6f:d3:a7:27:a7:d0:cc:
08:63:3b:ea:0e:1d:44:85:56:de:9d:60:fc:0a:e5:
9d:19:6f:20:e0:e2:d2:0c:b1:ec:d7:52:14:55:ab:
1c:5d:d4:75:37:75:93:4a:a4:3f:72:1b:10:37:54:
5a:cc:38:73:b8:9c:a8:08:1c:99:44:5a:9f:71:64:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:CD:18:4E:20:BF:0C:CE:82:9B:9B:B5:5E:C3:69:B1:56:62:B2
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/dFXNGE4gvwzOgpubtV7DabFWYrI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:83:3f:17:5a:e4:e5:da:5a:f3:ba:05:9d:47:a4:fc:41:53:
6f:43:2c:b7:3a:e1:41:91:51:0e:63:17:a3:f6:e4:11:4e:26:
c3:2c:76:f5:bf:a3:59:2f:26:12:0c:fd:32:ca:47:5f:0d:3f:
ae:02:db:0a:7c:c0:55:5b:e5:68:b6:d6:61:09:63:57:c1:76:
90:e3:69:98:0e:22:03:d6:25:3c:71:ec:1d:a3:26:af:b1:a3:
d8:78:58:58:13:a6:32:93:87:e7:cd:fe:6d:17:2a:91:ac:da:
1b:22:bf:ad:e4:20:1d:3a:ac:3c:44:8a:57:fb:fe:83:1f:17:
66:3a:85:f5:8b:47:16:d7:e5:15:4b:4d:2b:0e:23:f5:70:6a:
c3:b1:0a:82:c1:60:5d:bc:26:84:6b:d1:89:1a:79:4a:8e:53:
8c:70:90:39:f6:f7:9e:d0:a6:c7:4f:97:fb:f5:67:24:71:ae:
fe:74:42:e1:a5:f3:59:48:a1:7f:b3:2f:e5:80:8d:42:3d:5f:
c7:cc:45:0e:b5:db:a0:c3:0c:a9:a6:36:a2:52:3d:4e:f3:f8:
1c:81:f2:c9:6d:2a:eb:56:5d:92:75:d9:23:f7:5f:01:f9:12:
7b:9b:dc:60:72:71:ab:a8:e5:62:92:91:f9:d9:8d:c0:23:fa:
b0:35:ff:af
-----BEGIN CERTIFICATE-----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Generated at Wed Dec 4 11:21:25 2024 by rpki-client on console.sobornost.net